Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
File:                     rS2L1OZ06M7VoJfUPepxhETnivU.mft (raw, json)
Hash identifier:          TWz832WYVAT4BbLGYfD9pLbm0rcNVZizYIcdY2eGrrQ=
Subject key identifier:   F1:C7:F2:3B:06:08:60:37:39:24:D6:EE:DE:92:27:46:00:56:2C:06
Authority key identifier: AD:2D:8B:D4:E6:74:E8:CE:D5:A0:97:D4:3D:EA:71:84:44:E7:8A:F5
Certificate issuer:       /CN=ad2d8bd4e674e8ced5a097d43dea718444e78af5
Certificate serial:       0196B8FEC7D0947B5B544B2AB1694A6BC42A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
Manifest number:          1202
Signing time:             Sat 10 May 2025 07:00:27 +0000
Manifest this update:     Sat 10 May 2025 07:00:27 +0000
Manifest next update:     Sun 11 May 2025 07:00:27 +0000
Files and hashes:         1: rS2L1OZ06M7VoJfUPepxhETnivU.crl (hash: CxsDfZHKeSxAkYWjwFQ59RbRFoNPYsi39uoEaZM3/VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:fe:c7:d0:94:7b:5b:54:4b:2a:b1:69:4a:6b:c4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2d8bd4e674e8ced5a097d43dea718444e78af5
        Validity
            Not Before: May 10 07:00:27 2025 GMT
            Not After : May 11 07:00:27 2025 GMT
        Subject: CN=f1c7f23b060860373924d6eede92274600562c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:d5:d5:81:30:0f:92:78:5a:fc:bf:dc:1d:
                    74:25:ab:16:e3:e2:cb:df:b4:ac:6d:ee:64:dd:7b:
                    d8:d7:fa:d7:e9:8f:01:da:06:db:30:f8:62:d0:55:
                    32:50:26:59:5f:bd:ae:3e:57:93:53:fd:84:95:c6:
                    93:51:34:8e:82:98:4c:d2:7d:d9:65:01:0e:5e:26:
                    63:3e:67:92:72:c8:3a:0f:36:9a:d2:72:31:4d:d6:
                    19:74:5e:54:3e:11:98:34:fe:21:8f:43:91:1a:89:
                    f3:0b:38:8c:c7:33:51:6e:e6:d2:4e:63:d3:a6:e0:
                    3e:1e:f9:10:0b:ac:13:63:e4:16:9b:f1:48:3e:46:
                    cd:3f:94:2b:15:22:70:7b:2d:18:62:f6:fa:a7:27:
                    b9:60:a6:1f:4e:e7:d1:4c:25:39:67:95:7e:09:e5:
                    a1:2d:9e:09:ce:2d:1a:86:db:03:f6:0e:74:70:27:
                    96:94:d5:53:fc:0c:2a:89:2a:54:b4:ba:80:3c:4d:
                    42:73:eb:16:0d:72:67:84:f6:c6:af:f4:16:8c:71:
                    6e:c6:2c:d6:ce:63:73:f2:bc:eb:63:09:56:d7:33:
                    80:b9:10:df:d7:58:ea:a8:f4:b0:93:ae:ac:ed:01:
                    5a:3f:95:62:bc:0a:1f:4f:d9:39:78:f6:22:9e:41:
                    41:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C7:F2:3B:06:08:60:37:39:24:D6:EE:DE:92:27:46:00:56:2C:06
            X509v3 Authority Key Identifier:
                keyid:AD:2D:8B:D4:E6:74:E8:CE:D5:A0:97:D4:3D:EA:71:84:44:E7:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:58:cc:27:bc:20:8e:0a:ff:e4:20:16:f4:f7:b4:96:8a:46:
         c6:4b:fc:33:fe:dc:2e:4d:2c:f7:d7:ef:8e:1c:df:82:94:6e:
         0f:c4:85:6b:92:64:1e:a8:a7:f6:dc:e4:a1:6c:99:c8:25:a1:
         f9:ca:a0:4c:33:09:1f:99:6f:34:90:70:19:46:a6:7f:58:b1:
         30:f9:07:fd:ae:03:9d:76:66:ec:ee:81:0d:ed:cb:e9:3e:af:
         de:76:06:e1:65:fd:b0:44:11:60:e9:9c:c7:04:cd:d0:04:bf:
         24:a0:95:88:fa:9d:c3:3a:46:f9:e3:ff:37:df:b0:0b:d2:6a:
         a2:91:5f:30:d7:b3:86:03:a1:13:57:ef:b1:94:81:72:26:35:
         f3:e2:6a:5d:fa:d2:90:ee:6d:13:95:21:8e:ce:6b:67:97:8b:
         ce:ed:94:a1:3c:f0:f6:16:65:59:de:7f:ae:3f:47:f3:b6:32:
         c6:97:d0:14:64:9c:03:44:f6:75:a4:90:88:f2:ef:a4:c7:8b:
         b0:3f:7e:f8:d8:fb:37:d2:1c:25:aa:25:f6:eb:dd:7a:d4:95:
         15:f9:99:0b:02:67:61:b0:42:cf:e9:21:7c:b1:88:a6:ea:2b:
         0f:01:27:e9:71:63:75:02:3a:37:8b:d0:58:31:26:c9:85:6a:
         e0:24:04:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/sfQlHtbVEsqsWlKa8QqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmQ4YmQ0ZTY3NGU4Y2VkNWEwOTdkNDNkZWE3MTg0NDRl
NzhhZjUwHhcNMjUwNTEwMDcwMDI3WhcNMjUwNTExMDcwMDI3WjAzMTEwLwYDVQQD
EyhmMWM3ZjIzYjA2MDg2MDM3MzkyNGQ2ZWVkZTkyMjc0NjAwNTYyYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UHV1YEwD5J4Wvy/3B10JasW4+LL
37Ssbe5k3XvY1/rX6Y8B2gbbMPhi0FUyUCZZX72uPleTU/2ElcaTUTSOgphM0n3Z
ZQEOXiZjPmeScsg6Dzaa0nIxTdYZdF5UPhGYNP4hj0ORGonzCziMxzNRbubSTmPT
puA+HvkQC6wTY+QWm/FIPkbNP5QrFSJwey0YYvb6pye5YKYfTufRTCU5Z5V+CeWh
LZ4Jzi0ahtsD9g50cCeWlNVT/AwqiSpUtLqAPE1Cc+sWDXJnhPbGr/QWjHFuxizW
zmNz8rzrYwlW1zOAuRDf11jqqPSwk66s7QFaP5VivAofT9k5ePYinkFBcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHH8jsGCGA3OSTW7t6SJ0YAViwGMB8GA1UdIwQY
MBaAFK0ti9TmdOjO1aCX1D3qcYRE54r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclMyTDFPWjA2TTdWb0pmVVBlcHhoRVRuaXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wODNmMjMtMjZlYy00MDMxLTg1M2Mt
ODJmMTUxYjY2NGM1LzEvclMyTDFPWjA2TTdWb0pmVVBlcHhoRVRuaXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wODNmMjMtMjZlYy00MDMxLTg1M2MtODJmMTUxYjY2NGM1
LzEvclMyTDFPWjA2TTdWb0pmVVBlcHhoRVRuaXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVjMJ7wg
jgr/5CAW9Pe0lopGxkv8M/7cLk0s99fvjhzfgpRuD8SFa5JkHqin9tzkoWyZyCWh
+cqgTDMJH5lvNJBwGUamf1ixMPkH/a4DnXZm7O6BDe3L6T6v3nYG4WX9sEQRYOmc
xwTN0AS/JKCViPqdwzpG+eP/N9+wC9JqopFfMNezhgOhE1fvsZSBciY18+JqXfrS
kO5tE5Uhjs5rZ5eLzu2UoTzw9hZlWd5/rj9H87YyxpfQFGScA0T2daSQiPLvpMeL
sD9++Nj7N9IcJaol9uvdetSVFfmZCwJnYbBCz+khfLGIpuorDwEn6XFjdQI6N4vQ
WDEmyYVq4CQEmA==
-----END CERTIFICATE-----
Generated at Sat May 10 16:40:10 2025 by rpki-client